My current employer maintains a list of banned countries. While there's nothing stopping me from going to any of them, I am not allowed to bring my laptop into the country, and accounts will generally be locked during the duration of travel.

I'm honestly not seeing what the problem is with this policy. Gitlab's reaction to the outrage has been incredibly poor, but the policy itself seems sane based on IP laws and data protection laws in certain countries.